4cc920aea5a24e0798d0a7679aaa63a6_JaffaCakes118 | Triage

Sharing

General

Target

4cc920aea5a24e0798d0a7679aaa63a6_JaffaCakes118
Size

66KB
MD5

4cc920aea5a24e0798d0a7679aaa63a6
SHA1

9f1632a9b0b04005a4195391d36a0837b8b85e39
SHA256

87a953793b32c609feb866d88d45da134f8b6ce4e6e8a5933e81e20c25c272ca
SHA512

8f302e2288abc7069fc5218c411a6cb93f451d18346ec11e9e90bc3311eca51d2d09c34aaf8e8c8d02dc2f3874d7a73fe55720e50254d010806d6be2fcedebbe
SSDEEP

1536:FQuzVOAopygGPNP+EtggPuFs1WCAes5wNr76doiV1kH3+:FQuzAAo21ViC1Wxur76OigH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cc920aea5a24e0798d0a7679aaa63a6_JaffaCakes118

Files

4cc920aea5a24e0798d0a7679aaa63a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b3acbdc2eb7794255e1d07383a1e225

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
MoveFileExW
FindVolumeClose
GetThreadIOPendingFlag
IsBadStringPtrW
SetSystemTime
DeleteAtom
GetProcessAffinityMask
WaitForMultipleObjects
SetThreadPriority
EnumResourceTypesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE